Data Security

ExfilSquad, which emerged on July 26, initially claimed to have exfiltrated data from 15 organizations.

Finding Sensitive Data Is Not the Same as Reducing Risk

The incident at Uber Freight, the logistics arm of the ride-sharing giant, comes after the Helix group listed the company on its data leak site on August 6, claiming to have accessed mailboxes, OneDrive accounts, and accounts receivable.

The unauthorized network, named "Delta WiFi Fast," was reportedly created by passengers attending the DEF CON hacker conference.

Wesco confirmed the incident involves its cloud CRM environment and stated that it is working with its vendor.

The misconfiguration on Klaviyo's sign-up page allowed any third-party trackers present on the site to potentially access and share sensitive customer data.

A vulnerability in HP ThinPro 8 and 9 operating systems allows attackers with physical access to bypass TPM-backed full-disk encryption and recover the key securing the device's root partition.

A vendor, identified as "Gordon Freeman," advertised a 7.5 GB database allegedly containing national ID numbers, addresses, phone numbers, birth and death dates, and family links for nearly all Israeli citizens.